Works with beta

Let's Encrypt

Let's Encrypt is the default public DV issuer for sslcertificates.io. The connector speaks ACME v2: newAccount, newOrder, DNS-01 and HTTP-01 challenges, finalize, download, renew and revoke. Staging is the only directory used unless production ACME is explicitly enabled.

Verification: test_verified. Connection: unknown. Credentials: configured. Live E2E: no.

No disposable public hostname with DNS or HTTP-01 control is configured in this environment for Let's Encrypt staging issuance.

What sslcertificates.io can do

Required permissions

No CA API token. The platform creates an ACME account with ES256. Production directory stays gated by ACME_PRODUCTION_ENABLED.

Setup

Open Dashboard → Integrations → Let's Encrypt. Enter the credentials described on this page. Values are encrypted at rest and never shown again. Run Test connection. Discovery runs only after authentication succeeds. Select a discovered resource. Do not paste opaque IDs unless the provider cannot enumerate them. Perform the certificate or notification action, then confirm the external system matches. Disconnect removes stored credentials and owned test resources created by sslcertificates.io.

Known limitations

Production issuance is disabled until an operator enables it. Staging certificates are untrusted in browsers. Live hostname E2E needs a disposable name you control.

Official sources

Fact checked 2026-09-20. https://letsencrypt.org/docs/staging-environment/ https://datatracker.ietf.org/doc/html/rfc8555 Let's Encrypt is a trademark of its owner. sslcertificates.io is not a partner or certified reseller unless a written agreement exists.

Capabilities

acme issue renew revoke dns-01 http-01 wildcard san

Connect

Create an account to connect

Let's Encrypt is a trademark of its owner. sslcertificates.io is not a partner or certified reseller unless a written agreement exists.